DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4885c61adc033b372ce05ddcf32607cf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4885c61adc033b372ce05ddcf32607cf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4885c61adc033b372ce05ddcf32607cf_JaffaCakes118
Size
140KB
MD5
4885c61adc033b372ce05ddcf32607cf
SHA1
f005880e4eca89b29a07c519dac4e51dbb3b86be
SHA256
d6866286a7fe2cbeeab31b6c1a66d4b20ab2f275dec7911fef73f0168467e7a3
SHA512
5f710cec699a2a8c3fc30a699f651647d261c87df51589b501bffa407f7c252a1e4cb2bfbcc52c2176eb1bb2c1f460d88be5b74243742c1bd4fd21fe14ab3acc
SSDEEP
1536:7u6Wwn6gNsD128JOVSB00RPF0h8k79Pl5E0HW6OQ6tVJ:q6Wngik8JzBrRPFidklVJ
Checks for missing Authenticode signature.
resource |
---|
4885c61adc033b372ce05ddcf32607cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE